General
-
Target
zloader 2_1.1.18.0.vir
-
Size
276KB
-
Sample
200719-5l2tgqakpa
-
MD5
3f5e18655426b5ffc62d65048187dfdc
-
SHA1
b785e3e416fe5a64dd518cefc1df2e8bb39e534e
-
SHA256
1dda49ee9286f6c433dd46056c690d02d2e7dea1f96e01dbe148136891d01bbd
-
SHA512
37d23977d2a36e30088a41236937b60a8b1173b44571e71213c78e9df335abfc5bbcc9986b77f508ac5dd5f61f3e0433bbbe7e11496947fa5a7378a66eefcd95
Static task
static1
Behavioral task
behavioral1
Sample
zloader 2_1.1.18.0.vir.dll
Resource
win7
Behavioral task
behavioral2
Sample
zloader 2_1.1.18.0.vir.dll
Resource
win10v200430
Malware Config
Extracted
zloader
10/03
https://dhteijwrb.host/milagrecf.php
https://aquolepp.pw/milagrecf.php
Targets
-
-
Target
zloader 2_1.1.18.0.vir
-
Size
276KB
-
MD5
3f5e18655426b5ffc62d65048187dfdc
-
SHA1
b785e3e416fe5a64dd518cefc1df2e8bb39e534e
-
SHA256
1dda49ee9286f6c433dd46056c690d02d2e7dea1f96e01dbe148136891d01bbd
-
SHA512
37d23977d2a36e30088a41236937b60a8b1173b44571e71213c78e9df335abfc5bbcc9986b77f508ac5dd5f61f3e0433bbbe7e11496947fa5a7378a66eefcd95
Score10/10-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-